[179397] in North American Network Operators' Group
Re: Open source alternatives to UNINETT Stager for visual netflow
daemon@ATHENA.MIT.EDU (Joe Loiacono)
Fri Apr 10 17:07:00 2015
X-Original-To: nanog@nanog.org
In-Reply-To: <0b0601d073a2$79e2b060$6da81120$@unwiredltd.com>
To: "Peter Kranz" <pkranz@unwiredltd.com>
From: Joe Loiacono <jloiacon@csc.com>
Date: Fri, 10 Apr 2015 17:06:50 -0400
Cc: nanog@nanog.org, NANOG <nanog-bounces@nanog.org>
Errors-To: nanog-bounces@nanog.org
You could use FlowViewer with the flow-tools underlying collector option
if you're collecting v5 netflow. This will permit you to keep long-term
graphs (ala MRTG - Last 24 hours, Last 7 days, etc.) for each AS peer with
5-minute granularity You can also graph specified time intervals at much
smaller time-bucket sizes.
FlowViewer has an IPFIX (e.g., v9, FNF, etc.) underlying collector also;
SiLK. However, last I checked, SiLK is not collecting AS information.
https://sourceforge.net/projects/flowviewer
Regards,
Joe
From: "Peter Kranz" <pkranz@unwiredltd.com>
To: <nanog@nanog.org>
Date: 04/10/2015 11:26 AM
Subject: Open source alternatives to UNINETT Stager for visual
netflow peering analysis
Sent by: "NANOG" <nanog-bounces@nanog.org>
We've really enjoyed the open source Stager platform for netflow analysis,
however the code has not seen updates in recent years. Looking for
alternative open source netflow analysis platforms with a web interface.
There are quite a few netflow tools around these days, and we are looking
for something that performs the steps needed to showing us traffic volumes
to particular AS#'s and their downstream customers for peering analysis
decisions. I can get coarse answers from nfdump, but would like something
more elegant for the NOC to use.
Peter Kranz
www.UnwiredLtd.com <http://www.unwiredltd.com/>
Desk: 510-868-1614 x100
Mobile: 510-207-0000
pkranz@unwiredltd.com <mailto:pkranz@unwiredltd.com>
